The malware ad served on the pages of NYTimes.com wasn't the first such case, and not even the most prominent -- a couple of years ago, malware ads showed up on CNN and The Economist, among many other sites. Neither will it be the last, so see how it's done in this code dissection by Troy Davis. (Update on Sep 14'09: NYTimes.com has more details about the attack.)